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In the Specification 

Please replace the paragraph beginning at page 7, line 10, 
with the following rewritten paragraph: 

In U.S. Patent Application Serial No. 09/240,720, 
a solution to the general problem of integrating IP Sec and 
NAT is presented. IP security is provided in a virtual 
private network using network address translation (NAT) by 
performing one or a combination of the four types of VPN 
NAT. (Three types of VPN NAT will be futher described 
hereafter, and the fourth is described in copending patent 
application, assignee docket END 3 1999 0093, supra S/N 
09/595,950, filed 16 June 2000.) This involves dynamically 
generating NAT rules and associating them with the manual or 
dynamically generated Internet key exchange (IKE) Security 
Associations, before beginning IP security that uses the 
Security Associations. (See, Harkins, D., Carrel, D., "The 
Internet Key Exchange (IKE)", RFC2409, November 1998. 
Security Associations is a term defined in RFC201, supra.) 
Then, as IP Sec is performed on outbound and inbound 
datagrams, the NAT function is also performed. By "perform 
IP Sec", is meant to execute the steps that comprise IP Sec 
outbound or inbound processing, as defined by the 3 IP Sec 
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RFCs (and others) above. By "perform NAT", is meant to 
execute the steps that comprise the VPN NAT processing 
hereafter described in this application.--. 
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